the-art-of-pivoting
adulau/the-art-of-pivotingThe Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
curated-resourcesdigital-forensicseducation+8
190
adulau/the-art-of-pivotingThe Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
airbus-cert/cve-2025-24985Detection of malicious VHD files for CVE-2025-24985
cyb3rfox/aurora-incident-responseIncident Response Documentation made easy. Developed by Incident Responders for Incident Responders
xchwarze/magic-extractorUniversal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
piat0n/baremetal-ram-dumperA bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.
daffainfo/vol-rsVolatility 3 ported to Rust. Same output, much faster.
cenobyte-vincit/memdumperAbuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…
mingchen-script/cve-2020-1472-visualizerPowerShell script to scan Windows Event Logs for CVE-2020-1472 indicators (events 5827-5831), export to CSV, and generate Excel pivot tables for…
busindre/dumpzillaExtract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
crocodyli/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
essexrich/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
mnrkbys/ma2tlmacOS forensic timeline generator using the analysis result DBs of mac_apt
benadia/an-integrated-wireless-network-forensic-analysis-frameworkThis framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
telefonica/hiddennetworks-pythonUSB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…
elevenpaths/iphonerestrictionspasscodebfExtracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.
shadowopcode/desckvb-ratFull analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain
iqbaalilmii/acropalypse-reconstructorA lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.